Sanitize XML